'Is there a way to make an Elastisearch error watcher only trigger for the first instance of a field?
I'm setting up an Elastisearch error watcher which every 30 minutes looks for errors in the log in the last 30 minutes and posts them to a Slack channel. My issue is that there are several errors per environment (which is a field in the log error message), so I would like to only trigger on/filter for the first error in an environment and only send that to Slack to avoid spamming the Slack channel. Is this possible?
elasticsearchSources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|